Local off-by-one in mtr versions 0.55 to 0.65

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Local off-by-one in mtr versions 0.55 to 0.65 - ---------------------------------------------- Przemysіaw Frasunek [email protected] / 11th December 2004 1. Background mtr combines the functionality of the 'traceroute' and 'ping' programs in a...

CVE-2004-1030

fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message...

Debian DSA-500-1 : flim - insecure temporary file

Tatsuya Kinoshita discovered a vulnerability in flim, an emacs library for working with internet messages, where temporary files were created without taking appropriate precautions. This vulnerability could potentially be exploited by a local user to overwrite files with the privileges of the use...

Sendmail .forward File Local Privilege Escalation

Binary data 2009.prm...

Mandrake Linux Security Advisory : man (MDKSA-2003:054)

A difficult to exploit vulnerability was discovered in versions of man prior to 1.5l. A bug exists in man that could cause a program named 'unsafe' to be executed due to a malformed man file. In order to exploit this bug, a local attacker would have to be able to get another user to read the...

multiple remote & local buffer overflows discovered in Drcatd

Zone-h Security Advisory Date of discovery : 24 june 2004 Date of release : 25 june 2004 Bug found by Khan Shirani [email protected] http://www.zone-h.org --------------------------------------- Software : Drcatd Bugs : Buffer Overflows , Remote and local multiple Risk : low Platform : nix...

[Full-Disclosure] [SECURITY] [DSA 500-1] New flim packages fix insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 500-1 [email protected] http://www.debian.org/security/ Matt Zimmerman May 1st, 2004 http://www.debian.org/security/faq -...

Solaris 10.x ESRI Arcgis Local Root Format String Exploit

Exploit for solaris platform in category local exploits ========================================================= Solaris 10.x ESRI Arcgis Local Root Format String Exploit ========================================================= / ESRI 9.x Arcgis local root format string exploit Copyright Kevin...

Arbitrary file overwriting in Unreal engine through UMOD

Luigi Auriemma Application: Unreal engine http://unreal.epicgames.com Versions: any game based on this engine that supports the UMOD installation. An example are Unreal Tournament = 451b and Unreal Tournament 2003 = 2225. A full list of vulnerable games is not available. Platforms: Windows and...

[Full-Disclosure] [SECURITY] [DSA 488-1] New logcheck packages fix insecure temporary directory

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 488-1 [email protected] http://www.debian.org/security/ Matt Zimmerman April 16th, 2004 http://www.debian.org/security/faq -...

KLA10355 LPE vulnerability in Symantec

An unspecified vulnerability was found in Symantec products. By exploiting this vulnerability malicious users can gain system privileges. This vulnerability can be exploited locally via an unknown vector. Original advisories Symantec advisory Related products Symantec-Windows-LiveUpdate...

KLA10362 OSI vulnerability in The Bat

An insecure ACL was found in The Bat! By exploiting this vulnerability malicious users can read e-mail messages. This vulnerability can be exploited locally. Original advisories - Related products The-Bat! CVE list CVE-2003-1133 warning Solution Update to latest version Impacts OSI Obtain sensiti...

CVE-2003-0854

ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd...

CORE-2003-0531: Multiple IBM DB2 Stack Overflow Vulnerabilities

Core Security Technologies Advisory http://www.coresecurity.com Multiple IBM DB2 Stack Overflow Vulnerabilities Date Published: 2003-09-18 Last Update: 2003-09-18 Advisory ID: CORE-2003-0531 Bugtraq ID: 8552, 8553 CVE Name: CAN-2003-0758, CAN-2003-0759 Title: Multiple IBM DB2 Stack Overflow...

Multiple IBM DB2 Stack Overflow Vulnerabilities

Advisory ID Internal CORE-2003-0531 Vulnerability Information: Date Published: 2003-09-18 Last Update: 2003-09-17 Advisory ID: CORE-2003-0531 Bugtraq ID:8552, 8553 CVE Name:CAN-2003-0758, CAN-2003-0759 Title: Multiple IBM DB2 Stack Overflow Vulnerabilities Class: Boundary Error Condition Buffer...

IBM DB2 db2dart - Buffer Overflow

IBM DB2 db2dart - Buffer Overflow source: https://www.securityfocus.com/bid/8552/info It has been reported that the IBM DB2 db2dart utility is prone to locally exploitable buffer overflow vulnerability. A local attacker, who can authenticate or has access as the db2as user, may exploit this issue...

SCO OpenServer 5.0.x - mana PATH_INFO Privilege Escalation

SCO OpenServer 5.0.x - mana PATHINFO Privilege Escalation source: https://www.securityfocus.com/bid/8618/info It has been reported that SCO OpenServer Inertnet Manager 'mana' process is prone to a privilege escalation issue allow local users to execute arbitrary code with elevated privileges. man...

XBlast 2.6.1 - HOME Environment Local Buffer Overflow

XBlast 2.6.1 - HOME Environment Local Buffer Overflow // source: https://www.securityfocus.com/bid/8296/info XBlast is contains a locally exploitable buffer overflow vulnerability due to insufficient bounds checking of data supplied via the HOME environment variable. Successful exploitation would...

Microsoft Windows Server 2000 - CreateFile API Named Pipe Privilege Escalation (1)

Microsoft Windows Server 2000 - CreateFile API Named Pipe Privilege Escalation 1 // source: https://www.securityfocus.com/bid/8128/info It has been reported that Microsoft Windows does not properly handle named pipes through the CreateFile API. Because of this, an attacker may be able to gain...

[SECURITY] [DSA-329-1] New osh packages fix buffer overflows

-------------------------------------------------------------------------- Debian Security Advisory DSA 329-1 [email protected] http://www.debian.org/security/ Matt Zimmerman June 20th, 2003 http://www.debian.org/security/faq -...